EUVD-2022-6653

Malicious code in bioql PyPI...

CVE-2022-40043

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations...

CVE-2022-40044

Centreon v20.10.18 was discovered to contain a cross-site scripting XSS vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

CVE-2022-40044

Centreon v20.10.18 was discovered to contain a cross-site scripting XSS vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...

CVE-2022-40043: Improper Neutralization of Special Elements used in an SQL Command

Centreon v20.10.18 was discovered to contain a SQL injection vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations...

PT-2022-25173

Name of the Vulnerable Software and Affected Versions Centreon version 20.10.18 Description The issue is a SQL injection vulnerability that can be exploited via the esc name parameter, also known as the Escalation Name, at the Configuration/Notifications/Escalations endpoint. This vulnerability...

PT-2022-25174

Name of the Vulnerable Software and Affected Versions Centreon version 20.10.18 Description The issue is a cross-site scripting XSS vulnerability that allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload via the esc name parameter at the...

CVE-2022-40044: Improper Neutralization of Input During Web Page Generation

Centreon v20.10.18 was discovered to contain a cross-site scripting XSS vulnerability via the escname Escalation Name parameter at Configuration/Notifications/Escalations. This vulnerability allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload...